tls_options to have pfx